49e1644216ee6444f8808fcaf5c4f1fce670bda97e88d12d677353a5426acfafN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49e1644216ee6444f8808fcaf5c4f1fce670bda97e88d12d677353a5426acfafN
Size

12KB
MD5

f67cc79c4638c606d041ed8199d3c6d0
SHA1

e7ead689d05bb09d03a8bb274a7a6eb9ed3a8567
SHA256

49e1644216ee6444f8808fcaf5c4f1fce670bda97e88d12d677353a5426acfaf
SHA512

56f31e1d980c358fa1847079020dd75cdde1275653ee5eda4a9d0a1ec4fbc5777ec1e0a14ab61f82bb99ce282e011c3698f2a6c1d7a7379f4ca5af0a415867a1
SSDEEP

96:nYiPegONcg3CHak9qD4SIB3zq/w4cqMQ:YiP/6cg3C6kHR0+RQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49e1644216ee6444f8808fcaf5c4f1fce670bda97e88d12d677353a5426acfafN

Files

49e1644216ee6444f8808fcaf5c4f1fce670bda97e88d12d677353a5426acfafN
.exe windows:4 windows x86 arch:x86

1b1d083291417e9b2ed712a577a01f1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClassLongA
DestroyWindow

kernel32

GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ